Privacy notice for business relations

Information clause for contractors and representatives of contractors of Elektrownia Wiatrowa Baltica-2 Sp. z o.o. and Elektrownia Wiatrowa Baltica-3 Sp. z o.o. (hereinafter referred to as the “Contractor”)

In accordance with Article 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), we kindly inform that:

Data Controllers
The Controllers of your personal data (hereinafter referred to as the "Controller”) are:

  • Elektrownia Wiatrowa Baltica-2 Sp. z o.o. with its registered office in Warsaw (00-542), ul. Mokotowska 49.
  • Elektrownia Wiatrowa Baltica-3 Sp. z o.o. with its registered office in Warsaw (00-542), ul. Mokotowska 49.

Data Protection Officer
In all matters related to your personal data, please consult Data Protection Officer in writing by sending correspondence to the address of the Controller's registered office indicated above or via e-mail:

Purpose of personal data collection
The Controller shall process your personal data in order to establish and conduct cooperation, including within the framework of the agreement between the Contractor and the Controller (hereinafter referred to as the “Agreement”):

  • pursuant to Article 6 (1) (b) of the GDPR – to take steps prior entering into the Agreement and to conclude and perform the Agreement, you are a party thereof,
  • pursuant to Article 6 (1) (c) of GDPR - to fulfill legal obligations incumbent on the Controller, e.g. documenting cooperation and retention of invoices,
  • pursuant to Article 6 (1) (f) of GDPR - a legitimate interest of the Controller, i.e. conducting ongoing communication as part of the performance of the Agreement,
  • pursuant to Article 6 (1) (f) of GDPR - a legitimate interest of the Controller, i.e. an investigation or defence against possible claims related to the performance of the Agreement or the need to demonstrate specific facts which are of significant importance to the Controller.

Data retention
The period of processing your personal data results from the aforementioned purposes of processing. In view of the above, your data will be processed for the duration of the Agreement as well as legal obligations incumbent on the Controller and then until the expiry of any claims related to the Agreement. After that time, your personal data will be deleted.

Data Recipients
Your personal data will be transferred to authorised institutions defined by law, processors who provide services to the Controller and to whom these data are entrusted, including entities from PGE Capital Group (e.g. PGE Systemy S.A., PGE Baltica Sp. z o.o. and PGE Polska Grupa Energetyczna S.A.) as well as entities from the Ørsted Group (Ørsted Wind Power A/S and Orsted Polska Services sp.z o.o.).

As a rule, your personal data will not be transferred to third countries outside the European Economic Area (hereinafter "EEA"), i.e. countries other than European Union Member States, Iceland, Norway and Lichtenstein. Performance of specific tasks or activities as part of IT services provided to the Controller by PGE Systemy S.A., may, however, result in the transfer of data outside the EEA.

For more information on possible data transfer and its safeguards, please consult our Data Protection Officer.

Your rights under DGPR
You shall have the right to submit a request concerning:

  • access to data (including obtaining information on the scope of data processed by the Controller as well as obtaining a copy thereof – see details in Article 15 of the GDPR),
  • rectification of data (i.e. correcting the data if they are incorrect or incomplete – see details in Article 16 of the GDPR),
  • erasure of data (if your data are no longer needed to achieve the purposes for which they were collected or the Controller has no legal basis for further data processing – see details in Article 17 of the GDPR),
  • restrictions on data processing (if you question the correctness of your data used by the Controller or if data is no longer needed by the Controller, but shall be processed due to the pursuit of claims by you – see details in Article 18 of the GDPR),
  • objection to the processing of personal data, including profiling (if data are processed on the basis of the Controller's legitimate interest or are used for direct marketing purposes – see details in Article 21 of the GDPR),
  • data portability – transfer of data to another data controller (if the processing of data provided to the Controller is carried out in an automated manner, based on consent or on the basis of a contract – see details in Article 20 of the GDPR).

If the processing of your personal data is based on your consent (e.g. consent for marketing purposes), you have the right to withdraw your consent at any time and in any way. Withdrawal of consent does not affect the lawfulness of the processing of your personal data, which was made on the basis of consent before its withdrawal.

Moreover, you shall have the right to lodge a complaint with the supervisory authority, that is:
the Office of the President of the Personal Data Protection Office, (Stawki 2, 00-193 Warsaw), if you believe that the processing of your personal data violates the law. More information: https://uodo.gov.pl/en/681/1404.

Other information on data processing
We hereby inform you that as part of the data processing referred to above, you will not be a subject to a decision based solely on automated processing, including profiling.

Additional information for representatives of Contractor or contact persons within the framework of cooperation between the Contractor and the Controller

Your personal data has been obtained from the Contractor, in connection with its cooperation with the Controller. The Controller will process your personal data (such as: name, surname, position, contact details) to the extent necessary to perform the Agreement.


This privacy notice was last updated in August 2023